CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS…

Medium · published January 19, 2021

CVSS v3.0
5.9
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 190851.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AC:H/C:H/S:U/PR:N/UI:N/AV:N/A:N/I:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00931 · 60.3th percentile
Published
2021-01-19T15:20Z
EPSS history
Timeline
  • 19 JAN 15:20Z
    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS…
    cvelistv5